Citrix Application Delivery Management vulnerabilities

5 CVEs affecting Citrix Application Delivery Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27512, published 2022-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27511, published 2022-06-16. High severity, CVSS 8.1. EPSS: 12.7% chance of exploitation in the next 30 days. Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to…
CVE-2019-9548, published 2019-06-05. Critical severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days. Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.
CVE-2019-17366, published 2019-10-09. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.
CVE-2022-27512, published 2022-06-16. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.
CVE-2021-22920, published 2021-08-05. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO,…